Experimental study on discretely modulated continuous-variable quantum key distribution 
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We present a discretely modulated continuous-variable quantum key distribution system in free space by 
using strong coherent states. The amplitude noise in the laser source is suppressed to the shot-noise limit by 
using a mode cleaner combined with a frequency shift technique. Also, it is proven that the phase noise in the 
source has no impact on the final secret key rate. In order to increase the encoding rate, we use broadband 
homodyne detectors and the no-switching protocol. In a realistic model, we establish a secret key rate of 46.8 
kbits/s against collective attacks at an encoding rate of 10 MHz for a 90% channel loss when the modulation 
variance is optimal. 

PACS numbers: 03.67.Dd, 42.50.-p, 89.70,+c 



I. INTRODUCTION 



Continuous-variable quantum key distribution (CV-QKD) 
by using coherent states (l|] was introduced as an alternative 
to the single-photon-based discrete quantum key distribution 
(QKD) protocol I2fl. In this protocol, two legitimate users 
(Alice and Bob) use coherent states whose X and P quadra- 
tures are Gaussian modulated to establish a shared secret key. 
CV-QKD has made great achievements during the past few 
years. At first, it was thought that no secret key rate could be 
obtained when the channel loss was larger than 3 dB, subse- 
quently, the 3-dB loss limit was beaten by the methods of re- 
verse reconciliation [3] and was experimentally demonstrated 
0]. At the same time, another method called postselection J5|] 
was proposed, which can also beat the 3-dB loss limit. Just 
like the discrete QKD protocol, at first, it was believed that 
the security of CV-QKD was based on the random switch- 
ing of bases that Bob measures. Subsequently, it was found 
that, without switching, CV-QKD is also secure jfl], and has 
performed experimental demonstrations 10,01. Several exper- 
iments of Gaussian-modulated CV-QKD with optical fibers 
have been implemented I9U11I1. However, the distance be- 
tween Alice and Bob is much shorter than that in the discrete 
QKD because the reconciliation efficiency of continuous vari- 
ables is much lower than that of discrete variables when the 
signal-to-noise ratio (SNR) is small. 

In order to adapt CV-QKD for long-distance communica- 
tion, two CV-QKD protocols with discrete modulation were 
proposed (TH O, and the former was recently experimen- 
tally implemented [ 14]. In these schemes, instead of Gaus- 
sian modulation, Alice modulates the quadratures of coherent 
states discretely. In the former protocol, Eve's attacks were 
restricted by tomography performed by Bob, whereas the lat- 
ter offered unconditional proofs with no assumption. The se- 
curity of the latter scheme is guaranteed by the optimality of 
Gaussian attacks u^, 1 1611. that is, when the covariance ma- 
trix of the state shared by Alice and Bob is the same as in the 
Gaussian modulated case, the secret key rate is also the same. 



However, discretely modulated CV-QKD is secure only when 
the modulation variance is small. So the SNR in discretely 
modulated CV-QKD is much smaller than that of the Gaus- 
sian modulated CV-QKD experiments so far, which means 
that the noise is more fatal in discretely modulated CV-QKD. 
The noise in CV-QKD mainly consists of two parts, quantum 
noise and classical noise. The former is induced by channel 
loss and can not be suppressed; the latter is called excess noise 
and can be arbitrarily suppressed in principle. 

In this paper, we present an experimental implementation 
of discretely modulated CV-QKD described in Ref . II 1 3M in free 
space. In order to increase the bandwidth of cryptography and 
to remove the noise caused by imprecise control of the rela- 
tive phase between the signal and the local oscillator (LO), we 
use the no-switching protocol 1 6] instead of randomly switch- 
ing the quadrature that Bob measures. Unlike Ref. Ill 411. we 
use strong coherent states instead of weak coherent states for 
obtaining a sizable feedback signal to lock the relative phase. 
Additionally, the amplitude noise in the laser source is sup- 
pressed at the shot-noise limit by using a mode cleaner com- 
bined with a frequency shift technique. Also, it is proven that 
the phase noise in the source has no impact on the final secret 
key rate. As a result, we establish a secret key rate of 46.8 
kbits/s for a 90% lossy channel (which corresponds to a 50 
km standard telecom fiber with a 0.2-dB/km loss) under the 
realistic model |4Q . 



II. THEORETICAL EVALUATION OF THE SECRET KEY 
RATES 

A. PROTOCOL DESCRIPTION 

In this section, we detail the calculation of the security 
bound of discretely modulated CV-QKD under collective at- 
tacks by considering the noise in the laser source. 

When the noise in the source is not considered, the protocol 
runs as follows 111. (i) Alice prepares one of the four coher- 
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ent states: |a^> = \ae l( 

it to Bob. The real number a is chosen so as to maximize 
the secret key rate. (ii)When Bob receives the state, he uses a 
50:50 beamsplitter to split the state into two beams. Then he 



measures the X quadrature of one beam and the P quadrature 
of the other, (iii) The signal of the modulated and measured 
value encodes the bit of the raw key, so after Bob's measure- 
ment, he and Alice share correlated strings of bits. By recon- 
ciliation and privacy amplification they can achieve secret key. 
This is the prepare and measure version of the protocol. It is 
easy to implement experimentally in this version, but difficult 
to analyze theoretically. Usually the security is established 
by considering the equivalent entanglement-based scheme. In 
this scheme, Alice has a pure two-mode entanglement state 
El 



1 3 

k=0 



where the states 
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m-0 



are orthogonal with each other. The state |0 m > is defined as 
follows: 



a -a 2 l2 



An+m 



where 



£0,2 = \ exp (-a 2 ) (cosh (-a 2 ) ± cos (-a 2 )) 
£13 = j exp (-Q" 2 ) (sinh (-Q" 2 ) ± sin ( _ « 2 )) • 



(3) 



(4) 



Alice holds mode A and sends mode #0 to Bob. Then she 
uses a set of projection operators \if/k) (i/fk\ (k = 0, 1, 2, 3) to 
measure the mode she keeps. If mode A collapses into |^), 
then the mode sent to Bob collapses into |a&>. 



B. THE ENTANGLEMENT-BASED SCHEME FOR A 
NOISY SOURCE 
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FIG. 1: The entanglement-based scheme of discretely modulated 
CV-QKD when considering the noise in the source. Bob uses het- 
erodyne detection and it is assumed that Eve can not benefit from the 
imperfection of Bob's detector 



mode A and sends mode #0 to Bob. Then, she uses a set of 
projection operators \if/k)(iffk\ (k = 0, 1,2, 3) to measure the 
mode she keeps. If mode A collapses into |t/a), the mode sent 
to Bob collapses into p^. On Bob's side, we consider the 
realistic model | 4], in which Eve cannot benefit from the noise 
added by Bob's detector. In the entanglement-based scheme 
we can simplify the description of the realistic detector on 
Bob side 1 10]. As shown in FigQ] the inefficiency of Bob's 
detector is modeled by a beam splitter with transmission 77, 
while the electronic noise v of Bob's detector is modeled by a 
thermal state p Ho with variance N, which enters the other input 
port of the beam splitter. Then, Bob uses a perfect heterodyne 
detector to measure state p B >- It is obvious to obtain that the 
variance of the result of Bob's measurement is fl7ll 



n 1 - 



n 1 



(6) 



where V B is the variance of state p B . Since the detector's ef- 
ficiency is 77 and the electronic noise is v, we can also obtain 
that 



V B V 



(7) 



so we can obtain N = 1 + 2v/(l -rj). To consider the ther- 
mal state ph as the reduced state obtained from a two-mode 
Gaussian state pgh q of variance N allows us to simplify the 
calculations. 



When the noise in the source is taken into account, things 
are slightly different. In the prepare and measure scheme, due 
to the noise in the laser source and the imperfection of mod- 
ulation, the state Alice sends to Bob is not a pure state 
instead it is a noisy mixed state p k B Without loss of general- 
ity, let us assume that the noise on the X quadrature and the P 
quadrature have the same variance 5s, and their mean values 
are both zero. Also, we assume that the noise is induced by a 
neutral person Fred, and the eavesdropper Eve can not benefit 
from it. 

In the equivalent entanglement-based scheme, as shown in 
Fig III Fred has a pure three-mode entanglement state, 

|<W> = 4 Yj ^ k)A Kf)> (5) 

where \(p k BoF ) satisfies tr F (\(f k BoF ) (^ oF |) = P Bq - Fred keeps 
mode F and sends modes A and Bq to Alice. Alice holds 



C. THE OPTIMALITY OF GAUSSIAN ATTACKS FOR A 
NOISY SOURCE 

In collective attacks, Eve uses an ancilla to interact with 
each pulse that Alice sends to Bob. After the interaction, the 
global state Pab f turns into Pabef- On Bob's side, before his 
measurement, the received pulse interferes with the thermal 
state ph , and the global state becomes Pab'efgh Under col- 
lective attacks, when Alice and Bob use reverse reconciliation 
and the reconciliation efficiency is /?, the secret key rate is lfl3ll 

K=(3I(a:b)- X (b:E\ (8) 

where a, b represent the classical data of Alice and Bob, 
I(a : b) is the Shannon mutual information between a and 
b, and x(b : E) is the Holevo bound, an upper bound for 
Eve's accessible information. When considering both the 
noisy source and the realistic detector, it is rather complicated 
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to derive the information that Eve gets by using the method in- 
troduced in Ref. 1181 . since the global state is an eight-mode 
state. So, we do not derive the secret key rate directly. Instead, 
we find a lower bound to K f l9h 



K=j3I(a:b)- X (b:EF), 



(9) 



and K < K always holds. It is obvious that when the noise in 
the source is small, K will be very close to K. Additionally, 
when the source is noiseless, K = K holds. The Holevo bound 
X (b : EF) is defined as 

X(b:EF) = S (p EF ) - J p(b)S (p b EF ) db, (10) 

where p(b) is the probability of the result of Bob's mea- 
surement. Before Bob's measurement, the global state is 
Pabee •> so we obtain S (pef) = S(Pab)- After Bob's mea- 
surement, the global state comes into p b AEFGH , thus we have 

s(p b EF ) = s{ P b AGH ). 

Notice that state pAB'GH is determined by state pab, so K 
is a function of pab- According to the optimality of Gaussian 
attacks , for all the two-mode states p A B with the same 

covariance matrix, K(pab) achieves the minimum value when 
Pab is Gaussian. In the following, instead of K, we will derive 
its lower bound K. When the channel's transmittance is To 
and the excess noise is sq, the variance matrix of pab is 



Jab 



(Va + 1)/ 2 



V?oZcr z 
[7o(VA+eo + &)]/ 2 



(11) 
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whereZ = 2o^ 2 f i + f i f 2 2 +#f 3 V] reflects 

the correlation between mode A and mode B, Va = 2a 2 is just 
the modulation variance in the prepare and measure scheme, 
I2 is a two-dimensional unit matrix and cr z - diag (1,-1). 
Then, we will represent the corresponding case in the Gaus- 
sian modulated protocol. In this case, Alice modulates the 
pure coherent states with Gaussian variables, whose vari- 
ance is Va- Then she sends them to Bob via a channel 
with transmittance T and excess noise 8. In the equivalent 
entanglement-based scheme, the variance of pab is 



7ab 



(V A + l)h ^lfZ E PR(T z 

<TZ EPR a z [T(y A +e) + \\h 



(12) 



where Z EPR - Jv 2 +2Va lfl3ll . The entanglement states 
used in Gaussian-modulated CV-QKD are maximally corre- 
lated, while those in discretely modulated CV-QKD are not, 
so Z < Zepr. To make y G AB equal to jab, we get 



T = T 



£ = 



7 2 ' Z 2 

^EPR 



(Va + s + 6s)-Va. (13) 



According to the optimality of Gaussian attacks [HI, Oil, if 
we use discrete modulation, when the modulation variance is 
Va, the variance of the noise in the source is 6s, the channel's 
transmittance is To and excess noise is so, the lower bound of 
the secret key rate is just the same as the secret key rate of the 
case in which Alice uses Gaussian modulation with variance 
Va, and the channel's transmittance and excess noise are given 
by Eq. O. 



D. CALCULATION OF THE SECRET KEY RATE 

We call Xc = VT - 1 + s the noise added by the channel, 
andxd - 2(1 + v)/rj - 1 the noise induced by the heterodyne 
detector. Then the total noise added between Alice and Bob is 



Xt =Xc+XdlT. 



(14) 



When Bob uses heterodyne detection, the mutual information 
between Alice and Bob is lEolElll 



I(a:b) = log 2 



V+Xt 



(15) 



[Xt + lJ 9 

where V = V A + 1. 

Then we will derive S (pab)- Let a = V,J3 = T(V+^ C ), and 
y = ^r(V 2 - 1), the symplectic eigenvalues A\, A2 satisfy 



= a 2 +0 1 -2y 2 , 
A 2 l A 2 2 = (a/3-y 2 f. 



(16) 



So we obtain 



A h2 = ^\{A± VA 2 "^), (17) 

where A = a 2 +{3 2 - 2y 2 and B = (aft - y 2 ) . Thus the entropy 
of Pab is 



S(pAB) = gUl) + gU 2 ), 



where 



x+ 1 lx + 1\ x- 1 (x-V 
8(x) = log 2 — — - — — log 2 



(18) 



(19) 



Let 

C = [A X 2 + 2a (a/3 - y 2 ) Xd + 2y 2 + B + 1] (fi + X dT 2 , 
D = (a+ ^x d f(J3+XdT\ 

(20) 

then the entropy of p b AGH is Il2lll 

s(p b AGH ) = gU 3 )^g(A 4 ), (21) 

where 



A 3A = ^\(C± VC 2 ^). 



(22) 



Since S (p b AGH ) is independent of Bob's measurement b, we 
obtain 

fp(W(p b AGH )db = s(p b ; GH ), (23) 

where bo is a constant. 

So, in the discretely modulated CV-QKD, the lower bound 
to the secret key rate is 

K =/31og 2 [ ^£ ) ~gUi)-g (A 2 ) + g (A 3 ) + g (A 4 ) . (24) 
+ 1 / 

It is enough to derive the lower bound of the secret key rate 
against collective attacks, because they are proven to be the 
most powerful attacks in the asymptotic limit ll22l l23h. 
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FIG. 2: The experimental schematic of discretely modulated CV- 
QKD. Laser, NP Photonics (1550 nm); RNGl,-2, random number 
generators; HWP1C6, half- wave plates; PBS1C5, polarizesr; PZT, 
piezoelectric transducer; QWP, quarter- wave plate; D1C4, detectors; 
LPF, low-pass filter. 



III. IMPLEMENTATION OF DISCRETELY MODULATED 
CV-QKD 

A. EXPERIMENTAL SETUP 

The schematic of our experimental setup is shown in Fig. 
[2 The laser source is a 1550-nm continuous-wave fiber laser 
(NP Photonics). The noise in the laser has been mainly sup- 
pressed by a mode cleaner, which is a triangle resonant cavity 
with a finesse of 500. Alice uses HWP1 and PBS1 to split a 
small part of the light as the signal, and the rest as the LO. The 
signal's power is about 4//W, and the LO's power is 40mW in 
our experiment. Then, Alice mixes two random electronic sig- 
nals with a 50-MHz carrier, and sends the outputs of the mix- 
ers to amplitude and phase modulators to modulate the sig- 
nal. Alice generates binary pseudorandom numbers by using a 
programmable function generator (Agilent33250A)in our ex- 
periment. Since the generation rate of random electronic sig- 
nals on Alice's side is 10MHz, the width of each coherent 
state is 100ns. The LO and the signal are sent to Bob through 
the quantum channel. We use HWP2 and PBS2 to replace the 
lossy channel (no excess noise). 

When Bob receives the signal that Alice sends, he splits it 
into two beams with HWP3 and PBS3. At one of the output 
ports of PBS3, he makes a homodyne detection and uses the 
DC part of the result as a feedback signal to control the PZT, 
so as to lock the relative phase between the signal and the 
LO at 7r/2. So, he is actually measuring the P quadrature at 
this port. At the other output port, he uses QWP to induce a 
7r/2 phase shift between the signal and the LO, and he makes a 
homodyne detection to measure the X quadrature. We design a 
broadband balanced detector with a photodiode G8 3 7 6-05 by 
Hamamatsu. The effective bandwidth is over 100 MHz, and 
the SNR is near 9.2 dB for 20-mW coherent light as shown 



in Fig. The outputs of detectors are mixed with a 50-MHz 
carrier and filtered by 25 -MHz LPFs. The outputs of filters 
are sampled by a data acquisition card NI PXIe-5122, and the 
sampling rate is 50 MHz. 



B. MODULATION AND NOISE SUPPRESSION 

In our experiment, the signal is not a weak coherent state 
but has a large offset. When the signal and the LO's phase is 
locked, the initial state can be written as |jco), while the mod- 
ulated state can be written as \xo + x + ip), where x and p are 
the signals added to the X and P quadratures of the light re- 
spectively. If x, p <?c jto, amplitude A and phase of the mod- 
ulated light are 



A = ^/(xo + x) 2 + p 2 « xo + x, 
6 = arctan(/?/(x + *o)) ~ p/xq. 



(25) 



So, when Alice modulates the amplitude and the phase of the 
light, she is just modulating the X and P quadratures of the 
light, respectively. The half-wave voltage of the amplitude 
and the phase modulators is 360V, while the electronic signals 
Alice adds to them are less than 2 V, so the condition x, p «: xo 
is satisfied. 

The light generated by the fiber laser, which has much 
relative intensity noise and phase noise in our exper- 
iment, can be treated as a coherent state whose am- 
plitude and phase are randomly modulated. It is not 
a pure state but a mixed state and can be written 
as p = J P(riA,np)\a(nA,np)) (a(nA,np)\dnAdnp, where 

\a(riA,np)) = \(xq + ha) e inp ^. This can be regarded as the 
fact that the source generates a pure state \a(riA, np)) with the 
probability P(ua, np). So for a particular state, we treat it as 
a coherent state \a (yia, np)), but the parameters ha and np are 
unknown. When Alice modulates its amplitude and phase by 
x and p/xo, respectively, it becomes |(xo + + x) e l ^ Hp+p/x °^ 
and can be written as \(xo + nA + x + ip) e inp ^ when x, p <?c x - 
The LO can be written as |<*lo£^ + " p) ), where aw is a real 
number, a 2 w is the intensity of the LO, and (p is the phase 
shift added by Bob. The LO is quite strong, so its amplitude 
noise can be ignored, and it has the same phase noise np with 
the signal when their optical path difference is far less than the 
coherence length, since they come from one beam. In homo- 
dyne detection, the difference of photoelectrons generated by 
two photodiodes satisfies II 2 Oil 



AAf e oc aw (cos <px + sin ipp) . 



(26) 



From Eq. d26lh we can see that the phase noise in the 
laser source has no effect on the results of the P quadrature 
measurement, since the phase noise np does not appear in 
Eq. ([26b . This is consistent with our experimental results. 
Whether the mode cleaner is added or not, the noise on the P 
quadrature can reach the shot-noise limit. However, matters 
are quite different with the X quadrature. When we measure 
the noise of the X quadrature without the mode cleaner, there 
is a very sizable classical noise with a sideband frequency up 



5 




Frequency (Hz) 

(a) Without the cavity 




Frequency (Hz) 



(b) With the cavity 

FIG. 3: (Color online) (a) The noise spectrum (0-100 MHz) of the 
X quadrature measurement of the signal without cavity (the highest 
curve), shot noise (the middle curve), and electronics noise (the low- 
est curve), (b) The noise spectrum (0-30 MHz) of the X quadrature 
measurement of the signal with cavity (the highest curve), shot noise 
(the middle curve), and electronics noise (the lowest curve). 



to 50 MHz, as shown in Fig. [3a). So, Alice uses a mode 
cleaner to purify the noisy coherent state. After purification, 
the amplitude noise above 10 MHz is remarkably suppressed 
and almost reaches the shot-noise limit, as shown in Fig. [3b). 

Although the high-frequency noise above 10 MHz has been 
suppressed, there is still much residual low-frequency noise 
under 10 MHz. In order to avoid this noise, Alice uses two 
strings of random numbers that she wants to send to mix with 
a 50-MHz carrier. Then, she modulates the two mixed elec- 
tronic signals to the amplitude and phase modulators, respec- 
tively. Bob can filter the low frequency noise easily and can 
pick up the interested frequency component by using a mixer 
and an LPF. Finally, the noise in the source is suppressed to 
the shot-noise limit and can be neglected. The relative phase 
between the signal and the LO is locked, so the phase noise of 
the interferometer is small enough to be ignored. In Gaussian- 
modulation-based protocols, the modulation variance is large, 
so it will induce notable excess noise [9]. However, in our 
experiment, the modulation variance is quite small (see the 
following), and the noise caused by the imperfect modulation 
can be ignored. 



C. DATA PROCESSING 

In order to get the measurement results of X and P quadra- 
tures of the nth coherent state, Bob needs to get the nth differ- 
ence of photoelectrons AN en . Since the width of each coherent 
state is T = 100ns, we obtain 




FIG. 4: log 10 \Si\ as a function of i. 



where V(t) is the output of the LPF. In practice, Bob does 
not integrate V(t), instead he samples it at t[ = ir and gets V* 
(i = 0, 1, 2, • • •), where r = 20ns is the sampling interval, and 
Vi is the sampling value. The bandwidth of V(t) is less than 
25MHz, so Bob can get all of the information of V(t) with 
the sampling rate of 50MHz. Bob can rebuild V(t) with his 
samples O 



oo 

V(t)= J] Vjsinc^-i), 



(28) 



so 



(29) 



where Si = 1)7 $mc(t/r)dt is symmetric with i = 2.5. By 
considering that the absolute value of Si attenuates quickly 
with the absolute value of i - 2.5, as shown in Fig. ffl in prac- 
tice, the sum in Eq. (|29t is truncated from i = to i = 5. So, 
the measurement result of the nth coherent state (take the X 
quadrature for instance) is 



Xn ~ k ^ Vsn+i-sS i, 



(30) 



i=0 



where the constant k contains all the dimensional pref actors. 

Thus, Bob approximately obtains the total difference of 
photoelectrons when he measures the received signal with this 
method. If Eve attacks by measuring the signal during time 
windows which are not sampled by Bob, she can not do it 
without being discovered, because she will inevitably the to- 
tal difference of photoelectrons obtained by Bob. Actually, if 
Eve uses this attack, she will increase the loss observed by 
Bob. So, the proposed protocol is secure against this attack. 



D. EXPERIMENTAL RESULT AND DISCUSSION 



r*nT 

ANe n OC I V(t)dt, 
J(n-\)T 



(27) 



The homodyne detectors are carefully calibrated, and their 
efficiencies are both n = 0.8. Then we need to determine the 
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X (Shot Noise Units) 

FIG. 5: The result of Bob's heterodyne measurement when the mod- 
ulation variance is 18. 



x 10 




Modulation Variance (shot noise unit ) 

FIG. 6: The secret key rate as a function of the modulation variance 
for an electronic noise of 0.12 (solid line), (dashed line), and 1.2 
(dotted line). The channel is noiseless, and its transmittance is 0.1; 
the efficiency of the detector is 0.8, and the reconciliation efficiency 
is 0.8. 

excess noise in Bob's homodyne detector. We just simulate 
the channel loss by using a beam splitter on a tabletop, so the 
channel's excess noise s is 0. When the channel's transmit- 
tance is T = 1 and the modulation variance is 18, the result 
Bob gets is shown in Fig. [5j There are 50000 points in this 
figure. From the data, we can calculate the excess noise in the 
detectors. The total added noise is determined experimentally 
to be about ^7 = 1.8. Since T - 1, £ = and tj = 0.8, from Eq. 
(ITU) we obtain v = 0.12. According to Eq. (|2]), we can find the 
maximal secret key rate by scanning the modulation variance 
V a , as shown in Fig. [6] As a result, for a 90% lossy channel 
and the reconciliation efficiency of 80%, when the modula- 
tion variance is 0.29, we achieve the maximal secret key rate 
of 46.8 kbits/s at the encoding rate of 10 MHz. 

We can also see that even if the electronic noise is sup- 
pressed at 0, the optimal secret key rate per coherent state is 
just 5.02 x 10" 3 bits, which is only a little bit higher than that 
in our experiment. So, it is not very wise to enhance the secret 



key rate by suppressing the electronic noise of the detectors. 

In our experiment, the encoding rate is limited by the band- 
width of the detectors, which is 100M. The secret key rate can 
be further enhanced by increasing the encoding rate, which 
needs a broader bandwidth detector and will lead to higher 
electronic noise. For detectors with a certain gain-bandwidth 
product, if we broaden the bandwidth B to ^[T0B, the gain G 
becomes 10"°' 5 G, which leads to a electronic noise of 1.2. In 
this case, the optimal secret key rate is 2.43 x 10" 3 bits/state, 
and the secret key rate per second is 1.64 times as before. So, 
we can enhance the secret key rate by decreasing the gain of 
the detectors so as to broaden their bandwidth and to increase 
the encoding rate. 



IV. CONCLUSION 

In this paper, we derive a lower bound to the secret key 
rate when considering the noise in the source, and we present 
a discretely modulated CV-QKD system by using strong co- 
herent states and heterodyne detection. We assume that the 
noise in the source is induced by a neutral person Fred, and 
we present the equivalent entanglement-based scheme. In this 
scheme, Eve can not purify the state shared by Alice and Bob, 
so we can not calculate the secret key rate. Instead, we derive 
a lower bound for the secret key rate. In our experiment, the 
noise of the laser is suppressed at the shot-noise limit by using 
a cavity and the method of frequency shift. Since the modula- 
tion variance is quite small and the relative phase between the 
signal and the LO is locked to perform heterodyne detection, 
the excess noise induced by the imperfection of modulation 
and the phase noise in the interferometer is negligible. In or- 
der to increase the repetition rate, we broaden the bandwidth 
of the detector at the expense of low SNR. When the chan- 
nel loss is 90%, we achieve a secret key rate of 46.8 kbits/s 
with the optimal modulation variance and the encoding rate 
of 10 MHz. For detectors with a certain gain-bandwidth prod- 
uct, the secret key rate can further be improved by broaden- 
ing the bandwidth of detectors and by increasing the encoding 
rate. However, the secret key rate is only an estimation and is 
not a real one. Many actions must be conducted, such as er- 
ror correction, privacy amplification, and reduction of guided 
acoustic-wave Brillouin scattering in fiber-optic implementa- 
tions, which are what we will perform in a future work. 
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